Dependabot sends PRs to forks

[jakirkham]

Just ran into this personally ( https://github.com/jakirkham/zarr-python/pull/1 ). Looks like this is an open upstream issue ( dependabot/dependabot-core#2804 )

[joshmoore]

@jakirkham : did this start following updating your main branch? Did you see any workaorunds that would could potentially work for you, or shall we just disable it until this passes?

[jakirkham]

Yeah. Not that I could see. I'm not sure

[jakirkham]

Actually I guess their recommendation is delete the fork and refork. Not ideal, but maybe worth trying

[jakirkham]

Ok took the plunge and deleted my fork and reforked. Hopefully I haven't broken things too badly on my end. Will see if that fixes it

[joshmoore]

Wow. Thanks for taking one for the team. Keep us posted.

[jakirkham]

IPython helped make it easier to sync everything locally 😄

No PRs yet 🍀

[jakirkham]

Haven't seen PRs in many months. So I think the answer is "delete and refork". Not ideal, but not much we can do about it either. Users are also free to raise this problem upstream ( dependabot/dependabot-core#2804 ). Going to close.

[jakirkham]

Unfortunately have started seeing this with Numcodecs. Tried deleting the fork and reforking, but the issue still occurs

jakirkham/numcodecs#1

[jakirkham]

Ok tried deleting the fork again and reforking. It seems to be working. Will keep an eye on it.

Sadly this closed and orphaned existing PRs from my repo.

We may want to revisit dependabot support given this issue remains unaddressed (and may dissuade new contributors from engaging).

[joshmoore]

dependabot/dependabot-core#2804 (comment)

We're actively working on this and a permanent fix should land in the next couple of weeks. We'll share more around the time we''re ready to roll this out

🤞🏽

[jakirkham]

Yep saw that. Though that comment is from a couple weeks back

[joshmoore]

In the mean time, do we need to restore these?

• Create/free mutex in init/destroy numcodecs#234
• Enable C-extensions on PyPy numcodecs#246

[jakirkham]

Tried reopening, but they are orphaned. One can still retrieve the code from them

[jhamman]

I have not been seeing this recently so I think this must be a thing of the past.